Authentication system for identification documents

ABSTRACT

A programming apparatus that authenticates the contents of driver licenses having both human recognizable information and machine readable information is disclosed. The contents of the driver licenses are verified without encountering any human error. The verified contents of the driver licenses may be transferred to a remote computer for other identification purposes such as preordained organ donors or possible criminal prosecution.

CROSS REFERENCE TO RELATED APPLICATION

This application is a continuation of application Ser. No. 08/680,452filed on Jul. 15, 1996, now U.S. Pat. No. 5,864,623 which isincorporated herein by reference.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention generally relates to an identification system fordocuments. More particularly, the present invention relates to aprogrammable apparatus for authenticating drivers' licenses used foridentification purposes. Specifically, the present invention relates toa programmable apparatus that identifies the contents of the driverlicenses used for identification purposes without any human error andallows the information carried by the driver licenses to be transferredto a remote location for further identification purposes.

2. Description of Related Art

The problem of rampant and readily available fake identification cards,more particularly, driver licenses/identification cards, has caused manyretailers fines, sometimes imprisonment, loss of tobacco and liquorlicenses, and has even subjected them to other forms of civil andcriminal liability. Over the course of years, various attempts have beenmade to prevent or detect the use of fake identification cards, but notwith a great deal of success. To help prevent the use of fakeidentification, since 1992 the United States and Canada have beenissuing new driver licenses in accordance with an international NorthAmerican Free Trade Agreement (NAFTA) standard created and enforced bythe American Association of Motor Vehicle Administrators (AAMVA). Thesenew driver licenses/identification cards have embedded coded, or evenencrypted coded information, with machine readable formats that conformto the NAFTA standards. It is desired that means be provided thatauthenticate the contents of these identification cards so as tosafeguard the retailer against the penalties that may otherwise beencountered by fake identification cards.

The use of driver licenses has expanded over the years to serve asidentification for various applications, such as for the purchase ofalcohol, tobacco or lottery products, as well as for gambling incasinos, off-track betting (OTB), movie theaters and user-definableevents, such as allowing the ingress into liquor establishments. All ofthese fields have an age requirement for the purchase of a product atthe point-of-transaction or for ingress into an establishment and thedriver license is the document used to provide age identification andall age verification is commonly accomplished in a relatively quickmanner. It is desired that means be provided that easily decides adriver licenses authenticity so that any purchase of a product having anage requirement is satisfied at the time of purchase and in a quick andconvenient manner.

As is known, driver licenses are accompanied with photo identificationof the particular driver, and in addition to the identification suppliedby a driver's license to a liquor retailer, the driver license isfrequently used for other identification purposes, such as for providingproper identification for check cashing. The frequent use of driverlicenses allows the licenses to serve as tools to detect or uncoverindividuals who are being sought out because of being subject to pendingcriminal prosecution. It is desired that means be provided to allow theinformation on the driver licenses to be transferred to a local orremote jurisdiction to help identify and detect individuals that may beclassified as being offenders against the criminal law of the associatedjurisdiction.

Driver licenses not only serve for identification for commercialtransactions, but also serve a humanitarian need of identifyingpreordained organ donors that may be involved in tragic accidents. It isdesired for humanitarian purposes that means be provided to transfer theorgan donor information commonly present on driver licenses to a localor remote jurisdiction so that an available organ donor may be quicklymatched to an individual in need of the now-available organ.

Driver licenses are commonly used in places of business, such asconvenience stores, liquor stores, entertainment centers which also havepersonal computers for use in business purposes, such as inventorymanagement. It is desired that means be provided so that personalcomputers may be readily adapted to serve as an integral part of anauthentication system for driver licenses.

OBJECTS OF THE INVENTION

It is a primary object of the present invention to provide anauthentication system to authenticate driver licenses that are codedwith machine readable information conforming to AAMVA standards.

It is a further object of the present invention to provide anauthentication system for not only verifying the contents of a driverlicense, but also allowing for the information to be transferred to alocal or remote jurisdiction so that it may be identified for criminalprosecution purposes or, conversely, for humanitarian purposes, such asfor identifying preordained organ donors.

It is another object of the present invention to provide anidentification system that utilizes personal computers that are commonlyfound in places of business having a need for authenticating thecontents of a driver license used for identification purposes.

SUMMARY OF THE INVENTION

The present invention is directed to an authentication system thatverifies the contents of documents, such as driver licenses.

The authentication system comprises a programmable apparatus thatverifies the contents of the document embodying both human recognizableinformation and machine recognizable coded information. The apparatuscomprises means for reading, means for parsing, means for comparing andmeans for displaying. The information of the document is read by themeans for reading and directed into the programmable apparatus. Themeans for parsing reads the information of the document in theprogrammable apparatus and parses such information into thejurisdictional segments each having predetermined values. The means forcomparing analyze the information against the predetermined values andgenerates a verification signal if the information and the values match.The means for displaying displays the verification signal.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of the programmable apparatus of the presentinvention.

FIG. 2 is composed of FIGS. 2(A) and 2(B) that illustrate the humanrecognizable and machine recognizable formats carried by driver licensesrelated to the present invention.

FIG. 3 is a flow diagram of the overall operation of the programmableapparatus.

FIG. 4 is composed of FIGS. 4(A), 4(B), 4(C) and 4(D), that respectivelyillustrates one of the four (4) primary program subroutines making upthe overall operation illustrated in FIG. 3.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

With reference to the drawing, wherein the same reference numbersindicate the same elements throughout, there is shown in FIG. 1 a blockdiagram of a programmable apparatus comprising a computer 12, moreparticularly, a central processing unit and arithmetic logic unit whoseactions are directed by computer programs comprising a series ofoperational steps performed on information read into the computer 12.

In general, the programmable apparatus authenticates a documentembodying information comprising both human recognizable information andmachine recognizable information comprising a series of codes. Theprogrammable apparatus comprises means for reading the information ofthe document into the programmable apparatus, means for parsing the readdocument information into jurisdictional segments each havingpredetermined values, and means for comparing the read information ofthe document against the predetermined values and generating at least averification signal on a display means, if the information of thedocument and the predetermined values match. The programmable apparatuscomprises a plurality of conventional elements arranged in anon-conventional manner with all elements being listed in Table 1.

TABLE 1 {PRIVATE } REFERENCE NO. ELEMENT 12 CENTRAL PROCESSING UNIT(CPU) AND ARITHMETIC LOGIC UNIT (ALU) 14 KEYBOARD 16 POINTER DEVICE 18PRINTER 20 NON-VOLATILE STORAGE 22 REMOVABLE STORAGE 24 VOLATILE STORAGE26 MODEM 28 REMOTE COMPUTER 30 DIGITAL SCANNER 32 MAGNETIC READER 34 BARCODE SCANNER 36 DECODER 38 CLOCK SOURCE 40 DECRYPTER ROUTINE 42 PARSERROUTINE 44 CRT DISPLAY 46 DIGITAL-TO-ANALOG (D/A) CONVERTER 48 D.C.VOLTAGE SUPPLY 50 WIRELESS TRANSMITTER 52 WIRING HUB 54 USER'S CONSOLE56 CRT DISPLAY 58 LIGHT EMITTING DIODES (LEDS) 60 SPEAKER 62 WIRELESSRECEIVER

The keyboard 14 and the pointer device 16, such as a mouse, provide ameans for the operator or user to enter information, via signal path 64,into the CPU 12. The printer 18 converts the outputs, present on signalpath 66, of the central processing unit 12 into printed images.

The non-volatile storage 20, the removable storage 22, and the volatilestorage 24 are all storage mediums, whose contents are controlled andupdated by the central processing unit 12, via signal path 68, 70 and 72respectively. The non-volatile storage 20 and the removable storage 22provide for permanent recordings of every transaction involved with ordetermined by the CPU 12, whereas the volatile storage 24 providestemporary storage of information while it is being processed by the CPU12. The removable storage 22 may be a disk that is insertable andremovable from the CPU 12.

The modem 26 is interconnected to the CPU 12 by way of signal path 74and allows the CPU 12 to share its input and manipulated data, as wellas the contents of its storage information, with the remote computer 26,via the signal path 76, which is typically established by a telephonecommunication link.

The digital scanner 30, magnetic reader 32, and bar code scanner 34 areeach capable of reading the information on the identification card 78,to be more fully described with reference to FIG. 2, that is routed tothese reading devices, via path 80. The digital scanner 30 converts theinformation on identification card 78 to machine understandable codesvia a conventional optical character recognition technique and routessuch converted information to the CPU 12 via the signal path 82. Themagnetic reader 32 and the bar code scanner 34 each read the informationpresent on the identification card 78 and supply respective outputsignals that are routed to decoder 36, via signal path 84 which, inturn, supplies machine readable signals to the CPU 12 via signal path86. The signal paths 82 and 86 may be provided by wireless devices, suchas, the wireless transmitter 50 and wireless receiver 62 both beingconventional and both to be further described hereinafter. The usage ofwireless devices may be advantageous if the digital scanner 30, magneticreader 32 and bar code scanner 34 are remotely located relative to theCPU 12.

A clock source 38 supplies the clock signal, via signal path 88, to theCPU 12 that, in response to an appropriate computer program routine,establishes the time and date in which the information present on signalpath 82, 84, 86 or 88 is read into and/or stored on the storage medium20, 22 or 24. The CPU 12 under the direction of its computer programs,to be more fully described with reference to FIGS. 3 and 4, routes theinformation of the identification card 78, preferably encrypted as to bedescribed hereinafter, via signal path 90 to the decrypter routine 40.The decrypter routine 40 decrypts the information and routes itsnoncrypted information, via signal path 92, to a parser routine 42 whichparses the information into jurisdictional segments, to be furtherdescribed with reference to FIGS. 3 and 4, each having predeterminedvalues. The parsed information is directed back to the CPU 12 via signalpath 94. The CPU 12, performs a series of operations, under thedirection of its computer programs, and provides, among other things, atleast a verification signal, as well as human recognizable informationthat is placed on signal path 96 and routed to a first CRT display 44via signal path 98 and to a second CRT display 56 via signal path 100.

The human recognizable information on signal path 98 also preferablycontains a digital signal representation that is routed to thedigital-to-analog (D/A) converter 46, which converts the digitalrepresentation into an analog signal representative of an audio signal.The digital signal representation also contains at least three bits eachrepresentative of verification signal conditions, such as YES, NO, andUNKNOWN to be used to respectfully flash GREEN, RED and AMBER LEDs ofthe LED array 58 to be further described with reference to FIG. 4(C).The digital-to-analog converter 46 is preferably excited by a D.C.voltage supply 48 which is also routed, via signal path 102, to a wiringhub 52 that also accepts the audio signal and the three bits (YES, NOand UNKNOWN) developed by the D/A converter 46. The wiring hub 52 is ofa conventional type that arranges the received power and signal sourcesinto appropriate cables, such as cable 104, that routes therepresentative audio signal from the D/A converter 46 to the speaker 60and the three digital bits (YES, NO and UNKNOWN) as well as theexcitation signal of the D.C. voltage supply 48 to the light emittingdiode array 58. The wiring hub 52 may also include a switch thatcontrols the on-off state of the excitation signal of the D.C. powersupply 48 applied to one of the light emitting diodes 58 (and also tothe CRT display 56 and speaker 60) so that the on-off power state of allelements 56, 58 and 60 may be remotely controlled from the wiring hub52.

The speaker 60 may be a piezoelectric device that when activated by theaudio signal developed by D/A converter 46 generates a buzzing soundthat alerts an individual at the user's console 54 that the information(to be further described with reference to FIGS. 3 and 4) beingdisplayed on either or both of the CRT displays 44 and 56 is notauthentic. The CRT displays 44 and 56 are preferably of the type that iscapable of handling text and graphics of the Super Video Graphics Array(SVGA) and/or National Television Standards Committee (NTSC).

The audio signal and the three bits (YES, NO and UNKNOWN) of the D/Aconverter 46 previously discussed and a signal representative that poweris available from the D.C. voltage supply 48 may also be applied to thespeaker 60 and light emitting diode array 58, by way of the wirelesstransmitter 50 cooperating with the wireless receiver 62 andinterconnected thereto by signal path 106, with the output of thewireless receiver 62 being routed, via signal path 108, to speaker 60and the light emitting diode array 58. The wireless transmitter 50,wireless receiver 62 and signal paths 106 and 108 are shown in phantomto indicate the alternate embodiment formed by the conventional wirelessdevices 50 and 62.

The speaker 60, and the CRT display 56 are both part of a user's console54 and allow a user, such as a retailer to visually verify theauthenticity of the information present on the identification card 78,such as a driver license, embodying human recognizable information andmachine recognizable information generally illustrated in FIG. 2 whichis comprised of FIGS. 2(A) and 2(B) that respectively show the frontface 78A and the rear face 78B, each embodying information that is givenin Table 2.

TABLE 2 {PRIVATE } REFERENCE NO. INFORMATION 112 JURISDICTION (U.S.(STATE) OR CANADA (PROVINCE)) 114 GRAPHIC OR LOGO OF JURISDICTION 116DOCUMENT TYPE 118 NAME AND ADDRESS OF INDIVIDUAL OF THE DOCUMENT 120PARTICULARS OF THE INDIVIDUAL OF THE DOCUMENT 122 SIGNATURE OFINDIVIDUAL OF THE DOCUMENT 124 PHOTOGRAPH OF INDIVIDUAL OF THE DOCUMENT126 IDENTIFICATION NUMBER OF DOCUMENT 128 DATE OF BIRTH (DOB) 130 US128BAR-CODE 132 MAGNETIC STRIP 134 ANSI-20.1; 1993 CHARACTER SET OR 2D BARCODE PDF-417 136 JURISDICTIONAL TEXT

The information given in Table 2 is read into the CPU 12 via signalpaths 86 and the machine readable information 130, 132 and 134 on face78B is preferably encrypted in a format preferably specified byANSI-20.1; 1993 character set. The information 134 may also be encryptedin a format in accordance to a 2D bar code known as PDF-417 defined bythe Symbol Technology Corporation of New York. The information 132 isalso preferably decrypted and readable by the ANSI-20.1; 1993 CharacterSet and more fully described in “Recommendation for use of MagneticStripe on Drivers License” which is part of the NAFTA standard createdand enforced by AAMVA which has been in existence in the United Statesand Canada since 1992 and is herein incorporated by reference.

In general, the operating programs residing in the CPU 12 authenticatethe information embodied in the document, such as a driver license 78,having the particulars given in Table 2 each located at a predeterminedregion of the driver license 78 and corresponding to those of anindividual and to those of a state or province in the United States orCanada, respectively, in which the individual legally resides but whichare generally referred to herein as a jurisdiction. The particulars ofthe individual include height, weight, date of birth, sex and organdonor consent, whereas the particulars of the jurisdiction may includethe state or province emblem or voting information. Further, the driverlicense 78 also includes graphics defining a background and/or a logo ofthe driver license 78. The operating program residing in the CPU 12 thatauthenticates these particulars and are comprised of a plurality ofprogram segments represented by an overall sequence 140 illustrated inFIG. 3 and tabulated in Table 3.

TABLE 3 {PRIVATE }REFERENCE NO. PROGRAM SEGMENT 142 START EVENT 144 DATAINPUT 146 DECODE DATA INPUT 148 SUBROUTINE FOR HANDLING OF LICENSEFORMAT 150 LICENSE FORMAT 152 DECRYPT DECODED INFORMATION 154 LICENSEFORMAT DETECT 156 DISPLAY ERROR MESSAGE 158 SAVE ERROR INFORMATION WITHTIME AND DATE 160 SUBROUTINE FOR HANDLING OF JURISDICTION FORMAT 162JURISDICTION FORMATS 164 PARSE DECRYPTED INFORMATION 166 JURISDICTIONFORMAT DETECT 168 SUBROUTINE FOR HANDLING OF LEGAL AGES 170 JURISDICTIONLEGAL AGE 172 DETERMINE LEGAL AGES 174 OF LEGAL AGE 178 SUBROUTINE FORHANDLING OF LICENSE BACKGROUND 180 LICENSE BACKGROUNDS 182 GENERATELICENSE GRAPHICS 184 DISPLAY DATA 186 SAVE TRANSACTION WITH TIME ANDDATE

The overall sequence 140 of FIG. 3 comprises the plurality of elementsand has four (4) major subroutines 148, 160, 168 and 178 to be furtherdescribed hereinafter respectively with reference to FIGS. 4(A), 4(B),4(C) and 4(D). As used herein with reference to FIGS. 3 and 4, theprogram segments, sometimes referred to herein as processing segments,are shown as being interconnected by signal path and control is passedfrom one program segment to another when the output information of oneprogram segment is placed on the signal path connected to the otherprogram segment.

As seen in FIG. 3, and with simultaneous reference to FIG. 1, theoverall program 140 is started by event 142 which initiates the readingof input data via signal path 82 or 86 of FIG. 1. With again referenceto FIGS. 1, 2 and 3, the information embodied in driver license card 78is read into CPU 12 via the digital scanner 30, magnetic reader 32 orbar code scanner 34 and represents the program segment 144 (input data)of FIG. 3. The operating program of CPU 12 routes the input data toprogram segment 146 via signal path 190 which, in turn, decodes theinput data 144 and supplies the decoded information on signal path 192to program segment 152.

The program segment 152 is part of subroutine 148, to be furtherdescribed, that receives license format information from license format150 and decrypts the information therein and provides such as the outputof subroutine 148.

The output of subroutine 148 is applied to signal path 194 to programsegment 154 which, like program segments 166 and 174, is a decisionalsegment which detects if the license format of the driver license 78 iscorrect, and if the format of the driver license 78 is correct, suppliesthe license format information to the processing segment 164 via signalpath 196, but if the driver license 78 format is invalid, supplies theinvalid license format on signal path 198 so that it is displayed onboth CRT displays 44 and 56 shown in FIG. 1 as a display error message156. The activation of the CRT displays 44 and 56 for the display errormessage 156, as well as other error displays and messages, is controlledby the CPU 12 servicing the input/output ports connected to the CRTdisplays 44 and 56. The displayed error message 156 is placed on signalpath 200 which is routed to program segment 158 so that the errormessage is saved along with its time and date and the program segment158 returns control to the start event 142 via signal path 202.

The program segment 164 is part of subroutine 160, to be furtherdescribed, and receives jurisdiction formats information that isdecrypted from program segment 162 which is also part of subroutine 160.The program segment 164 parses the decrypted information intojurisdictional segments having predetermined values, to be describedwith reference to FIG. 4(B). The program segment 164 supplies thedecrypted information via signal path 204 to jurisdiction format detectprogram segment 166 which, in turn, detects if the jurisdictional formatinformation 162 is correct, and if the information is correct, then thecorrect information is routed to program segment 172 via signal path206, but if the information is incorrect then, the incorrect informationis routed, via signal path 208, to the display error message programsegment 156 which displays such an error on the CRT displays 44 and 56of FIG. 1 and supplies that display error message to signal path 200previously described.

The processing segment 172 is part of subroutine 168, to be furtherdescribed, and receives jurisdictional legal ages information fromprogram segment 170 which is also part of subroutine 168. Programsegment 172 determines if the legal age requirements of the jurisdictionare met by the date of birth information of the driver license 78 andthen sends its determined information, via signal path 210 to decisionalsegment 174. If the decisional segment 174 detects that the legal agehas been satisfied, it routes this information onto program segment 182via signal path 212, but if the legal age information is incorrect, thenan error notification (display error message) is routed to programsegment 156 via signal path 204. Program segment 156 responds in amanner as previously described.

The processing segment 182 is part of subroutine 178, to be furtherdescribed, and receives the license background of the particularjurisdiction from program segment 180, also part of subroutine 178. Theprogram segment 182 generates license graphics and places such on signalpath 216 applied to program segment 184 which, in turn, is transferredas output displays to the CRT displays 44 and 56 of FIG. 1. Programsegment 184 applies its output on signal path 218 which in turn, isrouted to program segment 186 which saves the transaction along with itstime and date. The processing segment 186 provides notification, viasignal path 219 to the next start event 142 which, in turn, causes thesequence of the next overall segment 140 having four subroutines, thefirst of which may be further described with reference to FIG. 4(A)which is comprised of a plurality of program segment tabulated in Table4.

TABLE 4 {PRIVATE } REFERENCE NO. PROGRAM SEGMENT 220 GET DECODED DATA222 GET UNENCRYPTED JURISDICTION FROM DECODED DATA 224 LOAD STOREDJURISDICTION “KEYS” 226 DECRYPT DATA 228 PARSE DATA INTO 3-5 TRACKSDEPENDING ON JURISDICTION 230 READING TRACK DATA LOOP 232 GET NEXT TRACKOF DATA 234 TRACK BLANK 236 STORE VALUES FOR TRACK 238 STORE BLANKVALUES FOR TRACK 240 ALL TRACKS BLANK 242 ANY TRACKS BLANK 244 DISPLAY“BLANK CARD” MESSAGE 246 DISPLAY “INVALID LICENSE” MESSAGE 248 STOREERROR INFORMATION

The subroutine 148 of FIG. 4(A) is initiating with start procedure event192 and is terminated with the end procedure event 194, wherein events192 and 194 correspond to the signal paths shown in FIG. 3. It should benoted that program segments 150 and 152 shown in FIG. 3 as making upsubroutine 148 are not shown in FIG. 4(A) because the programmingfunctions performed by segments 150 and 152 are integrated and blendedinto the plurality of elements of FIG. 4(A). This same rationale isapplicable to the program segments 162-164, 170-172 and 180-182 of FIG.3 that have been blended into the program segments of FIGS. 4(B), 4(C),and 4(D) respectively to be further described hereinafter.

With reference to FIG. 4(A), the output of start procedure event 192 isapplied to signal path 250 which is routed to program segment 220. Theprogram segment 220 retrieves the decoded data shown in FIG. 3 asprogram segment 146 (decode data input) and provides such information onsignal path 252 which is applied to program segment 222.

Program segment 222 retrieves the unencrypted jurisdiction dataspecified in the decoded data of program segment 220 and routes suchinformation on signal path 254 which is applied to program segment 224.Program segment 224 loads the jurisdiction “keys” which identifies arecord for the jurisdictional segment. More particularly, the “keys”identify the tracks on the storage mediums 20, 22, 24 where jurisdictionsegments are stored so that the license format of the jurisdictionsegment under consideration may serve as the predetermined values ofsubroutine 148 to which the format of the data of the driver license 78read into the CPU 12 may be compared and authenticated as being correct.The comparison and authentication of the predetermined values of thejurisdictional segments is also accomplished for subroutines 160, 168and 178 to be described.

The information loaded by program segment 224 is applied to signal path256 that is routed to program segment 226 which decrypts the data itreceives from program segment 224 and routes such decrypted data onsignal path 258 which, in turn, is applied to program segment 228.

The program segment 228 parses the data into 3-5 tracks, dependent onthe jurisdictional segment specified by the decoded data of programsegment 220. The parsed data of program segment 228 is applied to signalpath 260 which, in turn, is applied to program segment 232 which is partof the reading track data loop 230 which is repetitively repeated 3-5times dependent upon the jurisdictional segment specified by the data ofprogram segment 220. More particularly, for example, if one jurisdiction(representative of a state in the United States or of a province inCanada) require s three (3) tracks of storage, loop 230 is repetitivelyrepeated three (3) times.

The first program segment 232 of loop 230 retrieves the next or firsttrack of data of the information present on signal path 260 and routessuch information to decisional segment 234 which, if the trackinformation is blank, provides that determination on signal path 264and, conversely, if the track is not blank provides that determinationon signal path 266 which is applied to program segment 236. Programsegment 236 stores the values for the retrieved track of data and afterit is stored applies an appropriate signal on signal path 268 to passcontrol to program segment 238 that also has signal path 264 fromprogram segment 234 applied thereto.

Program segment 238 stores the blank value for the retrieved track. Ifall blank values have not been stored then program segment 238 returnscontrol to program segment 232 by way of signal path 270 but, if allblank values have been stored then program segment 238 passes control toprogram segment 240 via signal path 272.

Program segment 240 determines if all the tracks assigned for theparticular jurisdiction under consideration are blank and if so providesknowledge thereof on signal path 274. Conversely, if all tracks are notblank, the program segment 240 passes control, via signal path 276, toprogram segment 242.

Program segment 242 determines if any tracks are blank and if the answeris yes then provides a notification thereof on signal path 280 however,if the answer to the question “any tracks blank” is no, (which signifiesa correct condition) then program segment 242 passes control to the endprocedure event 194 via signal path 278 which, in turn, returns to theoverall step-by-step procedure 140 shown in FIG. 3. If signal path 274or 280 is activated, then program segment 244 or 246, respectively, isactivated and an alarm message is displayed on the CRT displays 44 and56 of FIG. 1 and then control is passed to program segment 248. Programsegment 248 stores the alarm message of program segment 244 or 246 andthen passes control to signal path 284 which, in turn, providesnotification to the end procedure event 194 which allows the program toreturn to the overall procedure 140 of FIG. 3. The program segment 140of FIG. 3 sequences until it reaches signal path 196 which initiates thesubroutine 160 of FIG. 4(B) that is comprised of a plurality of programsegments that are tabulated in Table 5.

TABLE 5 {PRIVATE } REFERENCE NO. PROGRAM SEGMENT 286 GET DECRYPTED DATA288 LOAD STORED JURISDICTION FORMAT 290 PROGRAM LOOP FOR GATHERING TRACKDATA FOR JURISDICTION FORMAT 292 GET NEXT TRACK OF DATA 294 PARSE TRACKDATA ACCORDING TO JURISDICTION FORMAT 296 DATE MATCHED JURISDICTIONFORMAT 298 DISPLAY “FRAUDULENT CARD” MESSAGE 300 STORE INDIVIDUAL VALUESINTO DRIVER LICENSE FIELDS 302 STORE ERROR INFORMATION WITH TIME & DATE304 LOAD STORED JURISDICTION DATA FRAUD CHECKSUM 306 PROGRAM LOOP FORPERFORMING PARITY CHECKSUM 308 PERFORM PARITY CHECKSUM ON TRACK DATA 310DATA MATCHED JURISDICTION FORMAT 312 DISPLAY “TAMPERED CARD” MESSAGE 314STORE ERROR INFORMATION WITH TIME & DATE

As seen in FIG. 4(B) the subroutine 160 is initiated by start procedureevent 196 and terminated by end procedure event 204 each of which eventscorresponds to the signal path having the same reference number shown inFIG. 3. The notification of the start procedure event 196 is applied onsignal path 316 which is routed to program segment 286 which, in turn,retrieves the decrypted data originally loaded into the CPU via programsegment 144 of FIG. 3. Program segment 286 activates signal path 318that is routed to program segment 288 which loads the storedjurisdictional format defining the format related to the jurisdiction ofthe individual specified in the driver license 78 loaded into the CPU12. After such loading, program segment 288 passes control over toprogram loop 290 via signal path 320.

The first segment of loop 290 is program segment 292 which retrieves thefirst or next track of data defined by program segment 288 and passescontrol over to program segment 294 via signal path 322. Program segment294 parses the retrieved track data according to the particularjurisdictional format under consideration and passes control over toprogram 296 via signal path 324.

Program segment 296 is a decisional segment that matches the data fromprogram segment 292 to the jurisdictional format under consideration,and if a proper match exists passes control over to program segment 300via signal path 326, but if a match does not occur, passes control overto program segment 298 via signal path 328.

Program segment 298 causes the display of the message “fraudulent card”on the CRT displays 44 and 56 of FIG. 1 and then passes control over toprogram segment 302 via signal path 330. Program segment 302 stores theerror information along with its time and date and passes control overto program segment 304 via signal path 332.

Program segment 300 receive control from signal paths 326 and 332 andstores the individual values of the driver license data read into theCPU 12 into the driver license fields in the CPU 12.

Program segment 300 returns control, via signal path 334, to programsegment 292 which, as previously mentioned, is the first step of loop290. Loop 290 has a repetitive cycle between 3 to 5 times dependent onthe jurisdictional segment and for each repetitive cycle program segment300 passes control over to program segment 292 via signal path 334, andwhen loop 290 is complete, program segment 300 passes control over toprogram segment 304 via signal path 332. The interaction of loop 290serves as a fraudulent check which in actuality detects any counterfeitdocuments.

Program segment 304 loads the stored jurisdiction checksum and andpasses control over to program loop 306 having a first program segment,that is, program segment 308. The checksum determines if the data hasbeen tampered with or altered after having been officially issued.

Program segment 308 performs the parity checksum on the track datareceived from program segment 304 and then passes control onto programsegment 310 via signal path 338.

Program segment 310 performs a data match of the jurisdictional formatand if the data is not correct passes control over to program segment312 via signal path 340. Program 20 segment 312 causes the CPU 12 toactivate the CRT displays 44 and 56 of FIG. 1 and display the errormessage “tampered card” and then passes control over to program segment314 via signal path 342. Program segment 314 stores the errorinformation along with its time and date and passes control to endprocedure event 204 via signal path 344. End procedure event 204 alsoreceives control from program segment 310 via signal path 346 if thedata match jurisdictional format performed by program segment 310 iscorrect. End procedure event 204 returns control back to the overallprogram segment 140 of FIG. 3 which sequences to subroutine 168 of FIG.4(C) which is comprised of a plurality of program segments which aretabulated in Table 6.

TABLE 6 {PRIVATE }REFERENCE NO. PROGRAM SEGMENT 348 LOAD STORED CATEGORYAGENTS 350 GET INDIVIDUAL'S AGE 352 PROGRAM LOOP FOR GATHERING CATEGORYAGE 354 GET CATEGORY AGE 356 AGE = > CATEGORY AGE 358 SET CATEGORYRESULTS TO FALSE 360 SET CATEGORY RESULTS TO TRUE 362 GET PRIMARY AGECATEGORY 364 AGE = > PRIMARY CATEGORY AGE 366 FLASH AMBER LED 368 FLASHRED LED's 370 FLASH GREEN LED's

As seen in FIG. 4(C), the subroutine 168 is initiated by the startprocedure event 206 and is terminated by the end procedure event 212,with the events corresponding to signal paths 206 and applied uponsingle path 374 which notifies program segment 348. Program particularjurisdictional segment under consideration, and the passes control overto program segment 350 via signal path 376. The category ages mayinclude the legal age for drinking and voting.

Program segment 350 retrieves the individual's age from the initial dataread into the CPU 12 by program segment 144 of FIG. 3. The programsegment 350 passes, via signal path 378, control over to the programloop 352 which is repetitively performed 5 times and has a first programsegment 354.

Program segment 354 retrieves or gets the next or first category age ofprogram segment 350 and passes, via signal path 380, control over toprogram segment 356. Program segment 356 determines if the age of theindividual is within the category of ages for the jurisdictionalsegment, and if the answer is yes, then passes control over to programsegment 360 via signal path 382 and, conversely, if the category age isnot correct passes control over to program segment 358 via signal path384. Program segment 358 sets the category results false, and thenpasses, via signal path 386, control back to program segment 354 which,as previously discussed, is the first program segment of the loop 352.

Once the loop is iterated 5-times, then either program segment 358 or356 passes control over to program segment 362, via signal path 388.

Program segment 362 retrieves the primary age category, that is, forexample, the legal age of drinking in the particular jurisdiction, andthen passes control to program segment 364 via signal path 390.

Program segment 364 determines the age of the individual designated bythe contents of the driver license 78 read into the CPU 12, and, moreparticularly, determines if the age is below the required legal age.Program segment 364 in its determination sets one of the three (3)digital bits previously discussed with regard to the D/A converter 46that is past onto the LED array 58, both previously described withreference to FIG. 1. If the age of the individual does not at leastequal that required by the jurisdiction for the selected category, suchas drinking, program segment 364 passes control over to the programsegment 368, via signal path 392A, which causes the CPU 12 to have a REDindicator of the LED array 58 flashed. If program segment 364 is unableto determine the age category, it passes, via signal path 392B, controlover to program segment 366 which, in turn, causes the CPU 12 to havethe amber LED of the LED array 58 flashed. If program segment 364determines the primary age to be correct, program segment 364 passescontrol over to program segment 370, via signal path 392C. Programsegment 370 causes the CPU 12 to have the green LED of the array 58flashed. Once the LED flashing is completed, program segment 370 passes,via signal path 394, control over to the end procedure event 212 which,in turn, allows the subroutine 168 to be returned to the overall programsegment 140 of FIG. 3 which, in turn, allows the program segment 140 tosequence to subroutine 178 which may be further described with referenceto FIG. 4(B) comprised of a plurality of program segments that aretabulated in table 7.

TABLE 7 {PRIVATE }REFERENCE NO. PROGRAM SEGMENT 396 GET JURISDICTION ID& CODE 398 LOAD STORED LICENSE BACKGROUND 400 DISPLAY LICENSE BACKGROUND402 UNDER LEGAL AGE 404 LOAD STORED UNDER AGE GRAPHICS 406 DISPLAY UNDERAGE GRAPHICS 408 DETERMINE AGE LOOP 410 PROGRAM LOOP FOR DETERMINE AGECATEGORY 412 GET NEXT CATEGORY AGE 414 AGE = > CATEGORY AGE 416 DISPLAY“NO” SYMBOL 418 DISPLAY “YES” SYMBOL 420 GET DRIVER CLASS 422 LOADSTORED CLASS GRAPHICS 424 DISPLAY CLASS GRAPHICS

As seen in FIG. 4(D), the subroutine 178 is initiated with the startprocedure event 212 and terminated with the end procedure event 216which correspond to the signal paths 212 and 216 of FIG. 3. Theoccurrence of the start procedure event 212 is passed to the programsegment 396 by the way of signal path 426.

Program segment 396 retrieves the jurisdiction identification (ID) andthe code of the driver license 78, which is a code indicating the AAMVAassigned Jurisdiction Number and a Code which jurisdiction at the timeof encrypting. Program segment 396, after its completion, passes controlover to program segment 398 via signal path 428.

Program segment 398 loads the stored license background that was readinto CPU 12 by the program segment 144 of FIG. 3. Program segment 398passes control over to program segment 400 by way of signal path 430.

Program segment 400 displays the license background on the CRT displays44 and 56 of FIG. 1 and passes control over to program segment 402 viasignal path 432.

Program segment 402 determines if the age on the driver license is, forexample, under 21 (Legal Age) and if the answer is yes, passes controlover to program segment 404 via signal path 434, but if the answer isno, passes control to program segment 408 via signal path 436.

Program segment 404 loads the stored under age graphics and passescontrol over to program segment 406 via signal path 438 which causes theCPU 12 to have the CRT displays 44 and 56 of FIG. 1 display the underage graphics. The under age graphics may be selected to attract theattention of the user of the authentication system 10 of the presentinvention. After such display the program segment 406 passes controlover to program segment 408 via signal path 440.

Program segment 408 is an age determining segment loop which isaccomplished by a program loop 410 interlinked to program segment 408via signal paths 442 and 444.

The first program segment of program loop 410 is program segment 412which retrieves the next age category which, for example, may be the agefor smoking and passes control over to program segment 414 via signalpath 446.

Program segment 414 determines if the age of the individual of thedriver license 78 read into the CPU 12 is equal to or greater than thecategory age. The categories include alcohol, tobacco, lottery, gamblingand custom guidelines used for casino or for entrance into anentertainment facility. If the answer of program segment 414 is yes,program segment 414 passes control over to program segment 418 viasignal path 448, but if the answer is no, program segment 414 passescontrol over to program segment 416 via signal path 450.

Program segment 416 causes the CPU to provide the “no” symbol on the CRTdisplays 44 and 56 of FIG. 1, whereas program segment 418 causes the CPU12 to cause the display of the “yes” symbol on the same CRT displays 44and 56. The “yes” and “no” symbols may be selected to attract theattention of the user of the authentication system 10 of the presentinvention. The program loop 410 is typically and repetitively repeatedfive (5) times and upon such completion passes control back to theprogram segment 408 via signal path 444.

Program segment 408 after its completion passes control over to programsegment 420 via signal path 454.

Program segment 420 retrieves the driver class designation and passescontrol over to program segment 422 via signal path 456. Program segment422 loads the stored driver class graphics and passes control over toprogram segment 424 via signal path 458.

Program segment 424 causes the CPU 12 to display the class graphics onthe CRT displays 44 and 56 of FIG. 1 and upon its completion passes, viasignal path 460 control to end procedure event 216 which is also shownas signal path 216 of FIG. 3.

As seen in FIG. 3, the signal path 216 notifies the program segment 184of the generation of license graphics which, in turn, passes controlover to program segment 186 via signal path 218 which, in turn, passescontrol back to the start event 142, via signal path 220 so that theoverall program 140 of FIG. 3 may be repeated, if necessary.

It should now be appreciated that the practice of the present inventionprovides for an authentication system 10 to authenticate driver licensesthat are coded with machine readable information in accordance withAAMVA standards, as well as coded with human recognizable information.

It should be further appreciated that the present invention, not onlyverifies the contents of driver licenses but also allows the informationcontained in the CPU 12 to be transferred to a remote or localjurisdiction, via modem 26, to remote computer 28 so that theinformation may be identified for criminal prosecution purposes or,conversely, for humanitarian purposes, such as, for identifyingpreordained organ donors. The identification for criminal orhumanitarian purposes may be accomplished in a manner similar to thathereinbefore described with reference to FIGS. 1-4.

Furthermore, it should be appreciated that the present inventionprovides the means for not only rapidly authenticating a document, suchas a driver license, but also allowing the driver license to serve as aconvenient means for rapidly verifying that age requirements aresatisfied in any purchase at the point-of-transaction or in allowingingress into establishments having their own age requirements.

Further still, it should be appreciated that the practice of the presentinvention utilizes a personal computer, such as CPU 12, commonly foundin many places of businesses used for inventory purposes but also havinga need to authenticating the contents of a driver license, such asauthenticating identification for credit card and check writing at thepoint-of-sale. Further uses could be to authenticate driver licenses inpolice cars, ports of entry such as domestic and internal airports, seaports, rail stations and border check-points. Attached to existinglocking mechanisms, could be integrated into lottery, tobacco andalcohol vending machines and to points of entry to buildings and othersensitive areas. Verifying identity is also important to other areassuch as child day care centers and Post Offices to verify parcel pick-upand drop-off.

What is claimed:
 1. A programmable apparatus for authenticating adocument which embodies identification information for an identifiedentity comprising both human recognizable information and machinerecognizable coded information, said apparatus comprising: means forreading the information of said document into said programmableapparatus; means for determining whether said document includes alicense format corresponding to a reference license format based on acomparison between said read information and said reference licenseformat; means for parsing said read information into jurisdictionalsegments if said license format matches said reference license format,wherein reference jurisdictional segments as included in said referencelicense format each have predetermined values; processing meansdirecting the operation of said programmable apparatus for comparingsaid read information to determine whether said jurisdictional segmentsmatch said predetermined values; said processing means further directingthe operation of said programmable apparatus for determining whether aselected identification parameter for said identified entity correspondsto a preselected criterion and generating at least a verification signalif said selected identification parameter satisfies said preselectedcriterion; and means for indicating a verification signal.
 2. Theprogrammable apparatus of claim 1 wherein said means for indicating averification signal is manifested as a display means selected from thegroup consisting of: means for displaying read information from alicense format, means for displaying alarm messages, means fordisplaying error messages, and means for displaying a “yes” or “no”message.
 3. The programmable apparatus of claim 1, wherein said meansfor indicating a verification signal is capable of providing humanrecognizable information in text and graphics, said text and graphicsbeing capable of utilizing programs including the Super Video GraphicsArray, and National Television Standards.
 4. A method for authenticationof an identification criteria in an identification document, saididentification document containing a set of information segments relatedto an entity subject to identification, said information segments beingorganized according to one of a plurality of known formats, said methodcomprising the steps of: extracting at least a portion of said set ofinformation segments included in said identification document, saidextracted portion including a manifestation of said identificationcriteria; retrieving reference data from a storage means in respect tosaid known organizational format and comparing said extractedinformation segments with said retrieved format data to determineconformance of said extracted information segments with said knownorganizational format; upon making said conformance determination,selecting said information segment corresponding to said identificationcriteria and comparing it to a predetermined acceptance criteria;providing a signal indicative of whether said predetermined acceptancecriteria is met by said identification criteria.
 5. The authenticationmethod of claim 4 wherein said identification document is associatedwith a particular issuing jurisdiction and further whereinidentification documents so associated with said particular issuingjurisdiction are uniformly based on a common one of said knownorganizational formats.
 6. The authentication method of claim 2 whereinsaid step of comparing said extracted information segments with saidremueved format data includes the substeps of: determining an identityof an issuing jurisdiction for said identification document; andperforming a lookup in a stored database to find said common one of saidknown organizational formats for the jurisdiction so identified.
 7. Theauthentication method of claim 6 wherein a specified plurality ofrequired information segment records is defined for ones of saidplurality of known organizational formats, and further wherein said stepof comparing said extracted information segments with said retrievedformat data includes the further substeps of: comparing said requiredinformation segment records for said common one of said knownorganizational formats for the identified jurisdiction with saidinformation segments extracted from said identification document; anddetermining whether a correspondence exists between each of saidrequired information segment records and one of said extractedinformation segments.
 8. The authentication method of claim 7 whereinthe substep of the comparing said required information segment recordswith said extracted information segments includes the further substepof: parsing said extracted set of information segments into individualones of said set.
 9. The authentication method of claim 6 wherein onesof said plurality of known organizational formats define a particularordering of data for information segment records included in saididentification document, and further wherein said step of comparing saidextracted information segments with said retrieved format data includesthe further substeps of: comparing a data ordering of ones of saidextracted information segments with a data ordering for an associatedinformation segment record as defined by said common one of said knownorganizational formats for said identified issuing jurisdiction; anddetermining whether a correspondence exists between an informationsegment data ordering and a format-defined data ordering for anassociated information segment record for each of said extractedinformation segments.
 10. The authentication method of claim 9 whereinsaid substep of comparing a data ordering includes the further substepof: parsing said ones of said extracted information segments to providea segmentation thereof corresponding to said format-defined dataordering.
 11. The authentication method of claim 4 wherein said step ofcomparing said extracted information segments with said retrieved formatdata includes the further substep of: performing an error check on onesof said extracted information segments relative to un expected value ofsaid information segment, said expected value being determined inrespect to said known organization format.
 12. The authentication methodof claim 11 wherein said error check includes an application of achecksum to a value of ones of said extracted information segments. 13.The authentication method of claim 4 wherein said identificationcriteria is a date of birth and said predetermined acceptance criteriais a date corresponding to a minimum age for said entity subject toidentification.
 14. The authentication method of claim 4 wherein saidset of information segments are manifested in said identificationdocument in a form selected from machine recognizable, humanrecognizable, or both.
 15. The authentication method of claim 14 whereinsaid step of information segment extraction is implemented by operationof a magnetic reader or bar-code scanner when said set of informationsegments is in a machine recognizable form.
 16. The authenticationmethod of claim 14 wherein said step of information segment extractionis implemented by operation of a digital scanner when said set ofinformation segments is in a human recognizable form.
 17. Theprogrammable apparatus of claim 1 wherein said reading means is akeyboard.
 18. The programmable apparatus of claim 1 wherein said readingmeans is a digital scanner.
 19. The programmable apparatus of claim 1wherein said reading means is a magnetic reader.
 20. The programmableapparatus of claim 1 wherein said reading means is a bar code scanner.21. The programmable apparatus of claim 1 wherein said reading means isselected from the group consisting of a keyboard, a digital scanner, amagnetic reader and a bar code scanner.
 22. The programmable apparatusof claim 1 wherein said reading means is any two devices selected fromthe group consisting of a keyboard, a digital scanner, a magnetic readerand a bar code scanner.
 23. The programmable apparatus of claim 1wherein said reading means is any tree devices selected from the groupconsisting of a keyboard, a digital scanner, a magnetic reader and a barcode scanner.
 24. A programmable apparatus for authenticating anidentification document of an individual comprising: a reader adaptedread information from said identification document; a processor underthe control of software including: a jurisdiction discriminator engineadapted to determine and authenticate a jurisdiction that originatedsaid identification document using said information; and a comparatoradapted to compare segments of said information to a predeterminedacceptance criteria and generate a result; and a reporting deviceadapted to provide results of said comparator.
 25. The programmabledevice of claim 24 wherein said jurisdiction discriminator includes acomparator for comparing said information to jurisdictional referencedata.
 26. The programmable device of claim 24 wherein saidjurisdictional discriminator is adapted to compare said information toknown jurisdictional formats for said information to determine anorigin.
 27. The programmable device of claim 24 wherein said reader isselected from the group consisting of a keyboard, a digital scanner, amagnetic reader and a bar code scanner.
 28. The programmable device ofclaim 24 wherein said comparator is adapted to compare informationrelating to an age of said individual with a known age limit.
 29. Theprogrammable device of claim 28 wherein said age limit is selected fromthe group of activities having minimum ages consisting of purchasingalcohol, purchasing cigarettes and gambling.